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DETAILED ACTION 

This action is in response to the papers filed 8/6/2007. 

Response to Arguments 

Applicant's arguments with respect to Dellmo not teaching said cryptographic 
processor communicating with said user network interface using a predetermined 
protocol, and said cryptographic processor communicating with said network 
communications interface using the predetermined protocol have been fully considered 
but they are not persuasive. Dellmo teaches the MAC 60 may implement a 
predetermined wireless LAN MAC protocol. In one preferred embodiment, the LAN * 
MAC protocol may be based upon the IEEE 802.1 1 standard (see paragraph 0040). 

In response to applicant's argument that the examiner's conclusion of 
obviousness is based upon improper hindsight reasoning, it must be recognized that 
any judgment on obviousness is in a sense necessarily a reconstruction based upon 
hindsight reasoning. But so long as it takes into account only knowledge which was 
within the level of ordinary skill at the time the claimed invention was made, and does 
not include knowledge gleaned only from the applicant's disclosure, such a 
reconstruction is proper. See In re McLaughlin, 443 F.2d 1392, 170 USPQ 209 (CCPA 
1971). 



Claim Rejections - 35 USC § 102 
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The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

Claims 1, 3, 8, 1 1, 25, 27, 28, 30, 35-37, and 39 are rejected under 35 
U.S.C. 102(b) as being anticipated by Dellmo (U.S. 2002/0095594). Dellmo teaches a 
cryptographic device comprising: a cryptographic module (see paragraph 0038 i.e. 
cryptography circuit 70) and a communications module (see paragraph 0038 i.e. 
wireless transceiver 50) coupled thereto (see figure 7); said cryptographic module 
comprising a user network interface (see paragraph 0034 i.e. interface connector 27 
may be a PCMCIA connector or other similar connector that can readily interface to a 
number of possible LAN devices as will be appreciated by those skilled in the art) and a 
cryptographic processor (see paragraph 0047 i.e. .cryptography processor 72) coupled 
thereto (see figure 7); said communications module comprising a network 
communications interface (see paragraph 0035 and 0041-0046) coupled to said 
cryptographic processor (see figure 7); said cryptographic processor communicating 
with said user network interface using a predetermined protocol, and said cryptographic 
processor communicating with said network communications interface using the 
predetermined protocol (see paragraph 0040). 

With respect to claim 3, wherein said cryptographic processor comprises: a host 
network processor (see figure 2 element 25 and paragraph 0035 it is inherent that the 
computer station has a processor since unencrypted data called "plain text" is 
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generated at the station 25) communicating with said user network interface using the 
predetermined protocol (see paragraph 0040); and a cryptography circuit (see 
paragraph 0047-0050 i.e. field programmable gate array) communicating with said host 
network processor using the predetermined protocol (see paragraph 0050). 

With respect to claims 8, wherein said network communications interface 
comprises a wireless LAN (WLAN) communication circuit (see figure 4 and paragraph 
0035 and 0041-0046). 

With respect to claims 1 1 , wherein said user network interface comprises an 
Ethernet interface (see paragraph 0035-0036). 

With respect to claim 21, a communications method comprising: coupling a 
cryptographic module (see paragraph 0038 i.e. cryptography circuit 70) to a network 
device (see figure 4), the cryptographic module comprising a user network interface 
(see paragraph 0034 i.e. interface connector 27 may be a PCMCIA connector or other 
similar connector that can readily interface to a number of possible LAN devices as will 
be appreciated by those skilled in the art) and a cryptographic processor (see 
paragraph 0047 i.e. cryptography processor 72) coupled thereto (see figure 7); 
providing a communications module (see paragraph 0038 i.e. wireless transceiver 50) 
comprising a network communications interface (see paragraph 0035 and 0041-0046) 
coupled to the cryptographic processor (see figure 7); using the cryptographic processor 
to communicate with the user network interface and the network communications 
interface using a predetermined protocol (see paragraph 0040); and using the network 
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communications interface to communicate with a network (see figure 4 paragraph 
0035). 

With respect to claims 27, wherein the network communications interface 
comprises at least one of a wireless Local Area Network (WLAN) communication circuit, 
a wireline communication circuit, and a fiber optic communication circuit (see figure 4 
and paragraph 0035 and 0041-0046). 

With respect to claim 28, a communications system comprising: a plurality of 
network devices (see figure 4 element 25) coupled together to define a network (see 
figure 4), and a cryptographic device (see figure 4 element 20) coupled to at least one 
of said network devices; said cryptographic device comprising a cryptographic module 
(see paragraph 0038 i.e. cryptography circuit 70) coupled to said at least one network 
device (see figure 2, and a communications module (see paragraph 0038 i.e. wireless 
transceiver 50) coupled to said cryptographic module (see figure 7); said cryptographic 
module comprising a user network interface (see paragraph 0034 i.e. interface 
connector 27 may be a PCMCIA connector or other similar connector that can readily 
interface to a number of possible LAN devices as will be appreciated by those skilled in 
the art) and a cryptographic processor (see paragraph 0047 i.e. cryptography processor 
72) coupled thereto (see figure 7); said communications module comprising a network 
communications interface (see paragraph 0035 and 0041-0046) coupled to said 
cryptographic processor (see figure 7); said cryptographic processor communicating 
with said user network interface using a predetermined protocol (see paragraph 0040), 
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and said cryptographic processor communicating with said network communications 
interface using the predetermined protocol (see paragraph 0040). 

With respect to claim 30, wherein said cryptographic processor comprises: a host 
network processor (see figure 2 element 25 and paragraph 0035 it is inherent that the 
computer station has a processor since unencrypted data called "plain text" is 
generated at the station 25) communicating with said user network interface using the 
predetermined protocol (see paragraph 0040); and a cryptography circuit (see 
paragraph 0047-0050 i.e. field programmable gate array) communicating with said host 
network processor using the predetermined protocol (see paragraph 0050). 

With respect to claims 35, wherein the network communications interface 
comprises at least one of a wireless Local Area Network (WLAN) communication circuit, 
a wireline communication circuit, and a fiber optic communication circuit (see figure 4 
and paragraph 0035 and 0041-0046). 

With respect to claims 36, wherein said user network interface comprises an 
Ethernet interface (see paragraph 0035-0036). 

With respect to claim 37, a cryptographic module comprising: a user network 
interface (see paragraph 0034 i.e. interface connector 27 may be a PCMCIA connector 
or other similar connector that can readily interface to a number of possible LAN 
devices as will be appreciated by those skilled in the art); and a cryptographic processor 
(see paragraph 0047 i.e. cryptography processor 72) coupled to said user network 
interface (see figure 7); said cryptographic processor for communicating with said user 
network interface using a predetermined protocol (see paragraph 0040), and also for 
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communicating with a network communications module using the predetermined 
protocol (see paragraph 0040). 

With respect to claim 39, wherein said cryptographic processor comprises: a host 
network processor (see figure 2 element 25 and paragraph 0035 it is inherent that the 
computer station has a processor since unencrypted data called "plain text" is 
generated at the station 25) communicating with said user network interface using the 
predetermined protocol (see paragraph 0040); and a cryptography circuit (see 
paragraph 0047-0050 i.e. field programmable gate array) communicating with said host 
network processor using the predetermined protocol (see paragraph 0050). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 2, and 10 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dellmo (U.S. 2002/0095594) in view of Boucher et at (U.S. 6,427,173). Dellmo 
teaches everything with respect to claims 1, 21, 28, and 37 above but with respect to 
claim 2, 22, 29, and 38 Dellmo teach the cryptographic device wherein said user 
network interface and said network communications interface both comprise Local Area 
NetWork ( LAN) interfaces (see paragraph 0034 and 0035). Dellmo does not teach the 
predetermined protocol comprises Media Independent Interface. Boucher teaches the 
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predetermined protocol comprises Media Independent Interface (see Boucher column 
17 lines 9-34). It would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains to have used 
Media Independent Interface because of it commercially available physical layer chips 
that support number of different conduits, such as twisted pair, coaxial cable or optical 
fiber (see Boucher column 17 lines 9-34). Therefore one would have been motivated to 
have used Media Independent Interface. 

With respect to claims 10, wherein said network communications interface 
comprises a fiber optic communication circuit (see Boucher column 17 lines 9-34). 

Claims 6, 25, 33 and 42 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dellmo (U.S. 2002/0095594) in view of Nguyen (U.S. 2002/0001307). 
Dellmo teaches everything with respect to claims 1, 21, 28, and 37 above but with 
respect to claim 6, 25, 33, and 42 Dellmo does not teach said cryptographic module and 
said communications module both operate using at least one unique external media 
access control (MAC) address, and at least one fixed internal MAC address. Nguyen 
teach said cryptographic module and said communications module both operating using 
at least one unique external media access control (MAC) address (see Nguyen 
paragraph 0864 i.e. external MAC address), and at least one fixed internal MAC 
address (see Nguyen paragraph 0864 internal addresses (i.e. IEEE assigned MAC 
addresses)). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have used MAC 
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addresses to guarantee the identity of each network device in the network. Therefore 
one would have been motivated to have used MAC address for authentication. 

Claims 12, 13, 15, 17, 19, 20, 22, 29, and 38 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Dellmo (U.S. 2002/0095594) in view of Boucher et at (U.S. 
6,427,173) in further view of Nguyen (U.S. 2002/0001307). With respect to claim 12 
Dillmo teaches a cryptographic device comprising: a cryptographic module (see 
paragraph 0038 i.e. cryptography circuit 70) and a communications module (see 
paragraph 0038 i.e. wireless transceiver 50) coupled thereto (see figure 7); said 
cryptographic module comprising a user Local Area Network ( LAN) interface (see 
paragraph 0034 i.e. interface connector 27 may be a PCMCIA connector or other similar 
connector that can readily interface to a number of possible LAN devices as will be 
appreciated by those skilled in the art) and a cryptographic processor (see paragraph 
0047 i.e. cryptography processor 72) coupled thereto (see figure 7); said 
communications module comprising a network LAN interface (see paragraph 0035 and 
0041-0046) coupled to said cryptographic processor (see figure 7). Dillmo does not 
teach said cryptographic processor communicating with said user network interface 
using a Media Independent Interface (MM), and said cryptographic processor 
communicating with said network LAN interface using the MM and said cryptographic 
module and said communications module both operating using at least one unique 
external media access control (MAC) address, and at least one fixed internal MAC 
address. Boucher teaches said cryptographic processor communicating with said user 
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network interface using a Media Independent Interface (Mil), and said cryptographic 
processor communicating with said network LAN interface using the Mil (see Boucher 
column 17 lines 9-34). It would have been obvious at the time the invention was made 
to a person having ordinary skill in the art to which said subject matter pertains to have 
used Media Independent Interface because of it commercially available physical layer 
chips that support number of different conduits, such as twisted pair, coaxial cable or 
optical fiber (see Boucher column 17 lines 9-34). Therefore one would have been 
motivated to have used Media Independent Interface. Nguyen teach said cryptographic 
module and said communications module both operating using at least one unique 
external media access control (MAC) address (see Nguyen paragraph 0864 i.e. external 
MAC address), and at least one fixed internal MAC address (see Nguyen paragraph 
0864 internal addresses (i.e. IEEE assigned MAC addresses)). It would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have used MAC addresses to guarantee the 
identity of each network device in the network. Therefore one would have been 
motivated to have used MAC address for authentication. 

With respect to claim 13, wherein said cryptographic processor comprises: a host 
network processor (see Dillmo figure 2 element 25 and paragraph 0035 it is inherent 
that the computer station has a processor since unencrypted data called "plain text" is 
generated at the station 25) communicating with said user network interface using the 
predetermined protocol (see Dillmo paragraph 0040); and a cryptography circuit (see 
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paragraph 0047-0050 i.e. field programmable gate array) communicating with said host 
network processor using the predetermined protocol (see Dillmo paragraph 0050). 

With respect to claims 15, wherein communications to and from said encrypted 
data buffer and said unencrypted data buffer use MM (see Boucher column 17 lines 9- 
34). 

With respect to claims 17, wherein said network communications interface 
comprises a wireless LAN (WLAN) communication circuit (see Dillmo figure 4 and 
paragraph 0035 and 0041-0046). 

With respect to claims 19, wherein said network communications interface 
comprises a fiber optic communication circuit (see Boucher column 17 lines 9-34). 

With respect to claims 20, wherein said user network interface comprises an 
Ethernet interface (see paragraph 0035-0036). 

Claims 4, 5, 23, 24, 31, 32, 40 and 41 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Dellmo (U.S. 2002/0095594) in view of Hashimoto (U.S. 
4,907,275). Dellmo teaches everything with respect to claim 1, 21, 28, and 37 but with 
respect to claims 4, 31, and 40, Dellmo does not teach wherein said cryptographic 
processor further comprises: an encrypted data buffer circuit coupled between said user 
network interface and said cryptography circuit; and an unencrypted data buffer circuit 
coupled between said cryptography circuit and said network communications interface. 
Hashimoto teaches wherein said cryptographic processor further comprises: an 
encrypted data buffer circuit (see figure 2B element 16) coupled between said user 
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network interface (see figure 2B element 12) and said cryptography circuit (see figure 
2B element 15); and an unencrypted data buffer circuit (see figure 2B element 14) 
coupled between said cryptography circuit (see figure 2B element 1 5) and said network 
communications interface (see figure 2B element 12). It would have been obvious at the 
time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have encrypted data buffer circuit and an unencrypted data 
buffer circuit to help control the data flow into and out of the cryptography circuit, (see 
column 3 line 57 - column 4 line 2). Therefore one would have been motivated to have 
an encrypted data buffer circuit coupled between said user network interface and said 
cryptography circuit; and an unencrypted data buffer circuit coupled between said 
cryptography circuit and said network communications interface. 

With respect to claims 5, 32 and 41 wherein communications to and from said 
encrypted data buffer and said unencrypted data buffer use the predetermined protocol 
(see Dillmo paragraph 0040). 

With respect to claims 23, wherein the cryptographic processor comprises a host 
network processor (see Dillmo figure 2 element 25 and paragraph 0035 it is inherent 
that the computer station has a processor since unencrypted data called "plain text" is 
generated at the station 25) communicating with said user network interface using the 
predetermined protocol (see Dillmo paragraph 0040); and a cryptography circuit (see 
Dillmo paragraph 0047-0050 i.e. field programmable gate array) communicating with 
said host network processor using the predetermined protocol (see Dillmo paragraph 
0050); an encrypted data buffer circuit (see Hashimoto figure 2B element 16) coupled 
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between the user network interface (see Hashimoto figure 2B element 12) and the 
cryptography circuit (see Hashimoto figure 2B element 15); and an unencrypted data 
buffer circuit (see Hashimoto figure 2B element 14) coupled between the cryptography 
circuit (see Hashimoto figure 2B element 15) and the network communications interface 
(see Hashimoto figure 2B element 12). 

With respect to claims 24. The cryptographic device of claim 4 wherein 
communications to and from said encrypted data buffer and said unencrypted data 
buffer use the predetermined protocol (see Dellmo paragraph 0040). 

Claims 7, 9, 26 and 34 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dellmo (U.S. 2002/0095594) in view of Cheng (U.S. 2003/0221034). 
Dellmo teaches everything with respect to claim 1,21, and 28 above, but with respect to 
claim 7, 26, and 34, Dellom does not teach wherein said communications module is 
removable coupled to said cryptographic module; and wherein said communications 
module comprises a predetermined one from among a plurality of interchangeable 
communications modules each for communicating over a different communications 
media. Cheng teaches wherein said communications module is removable coupled to 
said cryptographic module; and wherein said communications module comprises a 
predetermined one from among a plurality of interchangeable communications modules 
each for communicating over a different communications media (see paragraph 0029- 
0030). It would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains to have made the 
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communications module removable coupled with the cryptographic module to allow the 
user to change the module based on changing requirements (see paragraph 0030). 
Therefore one would have been motivated to have made the communications module 
removable coupled with the cryptographic module. 

With respect to claims 9, wherein said network LAN interface comprises a 
wireline LAN communication circuit (see paragraph 0036). 

Claim 14 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dellmo 
(U.S. 2002/0095594) in view of Boucher et at (U.S. 6,427, 173)in further view of 
Hashimoto (U.S. 4,907,275). Dellmo and Boucher teach everything with respect to claim 
12 but with respect to claims 14 they does not teach wherein said cryptographic 
processor further comprises: an encrypted data buffer circuit coupled between said user 
network interface and said cryptography circuit; and an unencrypted data buffer circuit 
coupled between said cryptography circuit and said network communications interface. 
Hashimoto teaches wherein said cryptographic processor further comprises: an 
encrypted data buffer circuit (see figure 2B element 16) coupled between said user 
network interface (see figure 2B element 12) and said cryptography circuit (see figure 
2B element 15); and an unencrypted data buffer circuit (see figure 2B element 14) 
coupled between said cryptography circuit (see figure 2B element 15) and said network 
communications interface (see figure 2B element 12). It would have been obvious at the 
time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have encrypted data buffer circuit and an unencrypted data 
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buffer circuit to help control the data flow into and out of the cryptography circuit, (see 
column 3 line 57 - column 4 line 2). Therefore one would have been motivated to have 
an encrypted data buffer circuit coupled between said user network interface and said 
cryptography circuit; and an unencrypted data buffer circuit coupled between said 
cryptography circuit and said network communications interface. 

Claims 16, and 18 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dellmo (U.S. 2002/0095594) in view of Boucher et at (U.S. 6,427,173) in further 
view of Cheng (U.S. 2003/0221034). Dellmo and Boucher teaches everything with 
respect to claim 12 above, but with respect to claim 16, they does not teach wherein 
said communications module is removable coupled to said cryptographic module; and 
wherein said communications module comprises a predetermined one from among a 
plurality of interchangeable communications modules each for communicating over a 
different communications media. Cheng teaches wherein said communications module 
is removable coupled to said cryptographic module; and wherein said communications 
module comprises a predetermined one from among a plurality of interchangeable 
communications modules each for communicating over a different communications 
media (see paragraph 0029-0030). It would have been obvious at the time the invention 
was made to a person having ordinary skill in the art to which said subject matter 
pertains to have made the communications module removable coupled with the 
cryptographic module to allow the user to change the module based on changing 
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requirements (see paragraph 0030). Therefore one would have been motivated to have 
made the communications module removable coupled with the cryptographic module. 

With respect to claims 18. The cryptographic device of claim 12 wherein said 
network LAN interface comprises a wireline LAN communication circuit (see Dellmo 
paragraph 0036). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the maijing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270- 
1018. The examiner can normally be reached on Monday-Thursday from 7:30 A.M. to 
5:00 P.M. The examiner can also be reached on alternate Fridays from 7:30 A.M. to 
4:00 P.M. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 





Devin Almeida 
Patent Examiner 
9/19/2007 
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SUPERVISORY PATENT EXAMINER 
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